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SYSTEM AND METHOD OF PROVIDING CONTENT 
IN A MULTICAST SYSTEM 

BACKGROUND 

This invention relates generally to accessing content in a networked environment, and 
in particular to providing secure content to users through multicast services. \ 

Multicast services provide for transmitting messages from a single source to several 
destinations. A multicast service allows for a set of mobile subscribers to receive multicast traffic 
on a common channel. In this way, many users can receive the same data without clogging up the 
air interface with multiple transmissions of the same data. 

SUMMARY 

In accordance with the teachings disclosed herein, systems and methods are provided 
for accessing multicast content by a user device over a network. For example, a method and system 
include generating a broadcast key on a user device so that multicast content may be sent to the user 
device. 

As another example, a multicast content accessing apparatus is disclosed that includes 
a data storage mechanism to store user identification key and multicast service activation 
information. Key generation instructions are configured to generate a broadcast key based upon the 
stored user identification key and multicast service activation data. The generated broadcast key 
indicates that multicast content is to be provided to the user device. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a block diagram depicting a multicast network system for delivering content 

to users. 

FIG. 2 is a block diagram depicting broadcast key generation for use in accessing 
content over a multicast network. 

FIG. 3 is a structure diagram depicting components used within a multicast system. 

FIG. 4 is a flowchart depicting an operational scenario for accessing content within 
a multicast system, 

FIGS. 5 and 6 are flowcharts depicting use of keys within a multicast system. 
FIG. 7 is a block diagram depicting an example multicast implementation 

environment. 

FIG. 8 is a block diagram of a wireless mobile communication device. 

DETAILED DESCRIPTION 

FIG. 1 shows at 30 a multicast system wherein users 40 access content from a source 
50 in a secure manner over a multicast network 60. The multicast system 30 allows for the 
unidirectional point-to-multipoint transmission of content (e.g., messages, text, audio, picture, video) 
from a single source 50 to several destinations (e.g., users 40). Content in the multicast system 30 
is sent once on a common multicast channel, and multiple users 40 can receive the same data without 
clogging up the air network interface with multiple transmissions of the same data. 

If the multicast system 30 is subscription-based, a subscription to a multicast 
subscription group 70 is required in order for users to access the content from the source 50. An 
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example of a service using a multicast mode could be a football results service or a news reporting 
service for which a subscription is required. A multicast subscription group 70 includes one or more 
users who have been subscribed to a multicast mode service and are therefore authorised to activate 
and receive multicast services associated with the group. 

Within that group 70 are users who are part of a multicast group 80. Users in the 
multicast group 80 are ready to or are receiving any multicast traffic transmitted as part of a multicast 
mode service. Multicast subscription group members 70 join the multicast group 80 by activating 
the multicast service. It should be understood that FIG. 1 presents an example of a multicast 
subscription group and that many different ways exist to establish and operate such groups. 

The content fi-om the source 50 is securely transmitted to the users within the 
multicast group 80. As part of achieving this and as shown at 90 on FIG. 2, a broadcast keyjs 
generated by a user. A broadcast key is common to all subscribers of a given service and is used to 
access a service provider's content. 

FIG. 3 illustrates generation and use of a broadcast key 100 to access content 102 
from a provider 104. Subscribers 106 who have been granted access to the content 102 receive the 
content 102 through a multicast service 108. The multicast service 108 securely transmits to the 
subscribers' devices 116 the content 102 through use of the broadcast key 100. A subscriber 
recipient may access different services of a provider 104 by providing different broadcast keys to the 
provider 104. As an illustration, a provider 104 may multicast its news service if it receives from 
a subscriber a broadcast key with a value of " 1 "; whereas it may multicast sports-related news if it 
receives a broadcast key with a value of "2". 

A broadcast key 100 is generated within a subscriber's device 116. As an example 
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of a device 116 generating a broadcast key 100, a broadcast key 100 may be derived based upon a 
user identification key 110 and a services activation key 1 12. The user identification key 1 10 is an 
unique key for identifying the user known by the service provider 104 at the initial subscription time. 
It may be the IMSI (International Mobile Subscriber Identity) key or any other negotiated key 
between the user and the service provider 104. This key is preferably synchronized at subscription 
time using a secure connection between the user's device 116 and a provider's remote computer 
server. 

After a contract is established or payment is received from the user, the service 
provider 104 will send an activation key 1 12. The activation key 1 12 is delivered to the subscriber 
106 by a direct message. The activation key 1 12 is preferably different for every subscriber. 

After receiving the activation key 1 12 or when the subscriber 106 wishes to begin 
receiving content 102, the device 116 generates a broadcast key 100. The device 116 may generate 
a broadcast key 100, such as by applying a specific operation or fiinction 114 to the user 
identification key 110 and the activation key 112. The function 114 may be implemented as 
instructions operable on a device processor and can be expressed as follows: 

F(user identification key, activation key) = broadcast key 
As an illustration, the function 114 could be an "Exclusive OR" function that is applied to the values 
of the user identification key 110 and activation key 112. 

The function's result can be sent from the device 1 16 to the provider 104 to designate 
the desired service. The broadcast key 100 may be generated each time the user wishes to access the 
provider's content 102. However, it should be understood that other approaches may be used, such 
as the broadcast key 100 being generated once and used for one or more successive accesses of the 
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provider's content 102. 

The generated broadcast key 100 is stored in the user's device 1 16. The function 1 14 
used to create the broadcast key 100 preferably is known only by the user's device 116 and the 
service provider 104. The broadcast key 100 generated by the internal function 114 can be changed, 
such as by providing a different activation (distribution) key 1 12 to the user's device 116. It should 
be understood that, in addition to using a user identification key 110 and an activation key 1 12, a 
function 114 may use other data for determining the broadcast key 100, such as the device's IMEI 
(International Mobile Equipment Identity) number. 

FIG. 4 illustrates an operational scenario for accessing multicast services. Start block 
200 indicates that at step 202, a user subscribes or is subscribed to a multicast subscription group 
and thereby becomes a member of that group. At step 204, a user activates the selected service and 
thereby joins the multicast group as shown at step 206. 

As shown at step 208, a user may decide to leave the multicast group (e.g., selects to 
stop receiving the content), and may also elect to leave the multicast subscription group by not 
retaining a subscription as shown at step 210. Processing for this operational scenario ends at end 
block 212. 

It should be understood that similar to the other processing flows described herein, 
the steps and the order of the steps in the flowchart described herein may be altered, modified and/or 
augmented and still achieve the desired outcome. For example at step 204, service activation may 
be performed by a home environment system on behalf of the user. As another example, at steps 208 
and 210, the home environment system can act to remove a user from a muhicast group and if 
required remove the user from the multicast subscription group. This allows a provider to bar service 
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if so desired. 

FIG. 5 illustrates another operational scenario involving ordering and delivering 
multicast services to users. Start block 300 indicates that at step 302, a user orders a service by 
subscribing to a multicast subscription group. At step 304, the service provider negotiates a user 
identification key with the customer device or may derive one based upon the user identification and 
user background information. This could also be a generic number used for all services of one 
supplier or by many suppliers. 

At step 306, the user pays the subscription yearly, monthly, weekly or other periodic 
fee. A unique virtual activation key is then delivered at step 308 to each user and for each service 
subscribed. Processing continues on FIG. 6 as indicated by continuation marker 310. 

With reference to FIG. 6, the user's device generates at step 314 a broadcast key 
which is transmitted to a multicast service providing system. The device's generation of the 
broadcast key in this operational scenario allows for a fast and secure distribution of a key. 
Generation of the broadcast keys inside the device reduces the risk of the key being copied and 
deciphered by radio transmission without penalizing the memory or resources of the device. 

Based on the generated broadcast key, multicast content is delivered to and decrypted 
by the user's device at step 316, If at a later date, the service is to be closed (e.g., the subscription 
is terminated), then the service provider can send at step 318 to the customer a virtual key that 
indicates to the device to clear/erase the broadcast identification key. Processing for this operational 
scenario ends at 320. 

FIG. 7 depicts at 400 a multicast system that can be used to provide unidirectional 
point-to-multipoint multicast services in a 3G wireless network in which data is transmitted fi-om 
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a single source entity 402 to a group of users (e.g., user equipment 410) in a specific area. A user, 
who is operating user equipment 410, can gain access to multicast content by using function 412 to 
generate on the user equipment 410 a broadcast key. 

The system 400 in this example is a Multimedia Broadcast/Multicast Service 
(MBMS) and operates in two modes: broadcast mode and multicast mode. Operating differently 
than a multicast mode wherein content is transmitted to multiple specific users, the broadcast mode 
operates to send content out generally to all subscribers. Thus, a broadcast service allows data to be 
transmitted to all subscribers in a set of cells over a shared broadcast channel 

As shown in FIG. 7, the system 400 includes various components, such as the 
Broadcast Multicast-Service Centre (BM-SC) 402, GPRS Support Node (GGSN) 404, Serving 
GPRS Support Node (SGSN) 406, and others. These components are discussed in greater detail in 
the following documents (which are incorporated herein by reference): (1) 3GPP TS 23.246 V.6.0.0 
(2003-09), Technical Specification, 3rd Generation Partnership Project, Technical Specification 
Group Services and System Aspects, Multimedia Broadcast/Multicast Service (MBMS), 
Architecture and functional description (Release 6) (available fi'om 3GPP support office address 650 
Route des Lucioles - Sophia AntipoUs, Valbonne - FRANCE); and (2) 3GPP TS 22.146 V6.2.0 
(2003-03) Technical Specification, 3rd Generation Partnership Project, Technical Specification 
Group Services and System Aspects, Multimedia Broadcast/Multicast Service, Stage 1 (Release 6) 
(available fi^om 3GPP support office address 650 Route des Lucioles - Sophia Antipolis, Valbonne 
- FRANCE), 

In the example of FIG. 7, the BM-SC 402 is a source for MBMS data. Furthermore 
because the system 400 may be used to transport several different types of protocols/codecs (e.g., 
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a media streaming application, a file download, etc.), different protection methods may be used as 
part of the transport of the content. 

With respect to operating in the multicast mode, a multicast service may be 
configured in the system 400 to securely transmit data to a given set of users, such as via ciphered 
traffic. In order to achieve this, the BM-SC 402 performs authentication, key distribution and data 
protection for the multicast service content and messages. 

The point-to-point services in a 3G network may use the 3 GPP AKA protocol 
(discussed in the following reference: TS 33.102 located at the 3GPP organization's web site) to both 
authenticate a user and agree on keys to be used between that user and the network. These keys are 
subsequently used to provide integrity protection of signalling traffic and optional confidentiality 
protection of both signalling and user data between the radio network controller (RNC) operating 
in the radio network subsystem (RNS) 408 and the user equipment 410. The user and the network 
could mutually authenticate each other using the AKA protocol. 

Preferably, the keys that are used to protect the transmitted data in the system 400 
should be regularly changed to ensure that they are fi'esh. This allows greater protection in a 
multicast type service, such as to address new users joining the service (e.g., to prevent them from 
being able to decrypt data sent before they joined the service) or a user leaving the service (e.g., to 
prevent them from being able to decrypt traffic sent after they left the service). The multicast data 
may be encrypted with a common encryption key, which is available to all users that have joined the 
MBMS service. 

It will be appreciated that the systems and methods are disclosed herein by way of 
example only. Many variations on the systems and methods are within the scope of the invention 
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as claimed, whether or not expressly described. For example, data structures and device storage 
mechanisms may be used to store data needed to generate a broadcast key on a device or to store the 
generated broadcast key. Still further, data signals transmitted using a communication channel may 
be used with the systems and methods. The data signals can include any type of data, such as the 
keys provided to the device or a broadcast key sent from the device. The data signal may be 
packetized data that is transmitted through a carrier wave or other medium across a wireless network. 
Computer-readable media may be provided to and used with the mobile device that is capable of 
causing a mobile device to perform the methods and implement the systems disclosed herein. 

As another example, the methods and systems may be used with a wide assortment 
of electronic devices, such as the mobile device 500 shown in FIG 8. The mobile device 500 is 
preferably a two-way communication device having at least voice and data communication 
capabilities. The mobile device 500 preferably has the capability to communicate with other 
computer systems on the Internet. Depending on the functionality provided by the mobile device 500, 
it may be referred to as a data messaging device, a two-way pager, a mobile telephone with data 
messaging capabilities, a wireless Internet appUance, or a data conraiunication device (with or 
without telephony capabilities), but is referred to herein primarily as a mobile device. 

The mobile device 500 includes a transceiver 51 1, a microprocessor 538, a display 
522, non-volatile memory 524, random access memory (RAM) 526, auxiliary input/output (I/O) 
devices 528, a serial port 530, a keyboard 532, a speaker 534, a microphone 536, a short-range 
wireless communications sub-system 540, and other device sub-systems 542. The transceiver 511 
preferably includes transmit and receive antennas 516, 518, a receiver (Rx) 512, a transmitter (Tx) 
514, one or more local oscillators (LOs) 5 13, and a digital signal processor (DSP) 520. Within the 
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non-volatile memory 524, the mobile device 500 includes a plurality of software modules 524A- 
524N that can be executed by the microprocessor 538 (and/or the DSP 520), including a voice 
communication module 524A, a data communication module 524B, and a plurality of other 
operational modules 524N for carrying out a plurality of other functions. 

The mobile device 500 is preferably a two-way communication device having voice 
and data communication capabilities. Thus, for example, the mobile device 500 may communicate 
over a voice network, such as any of the analog or digital cellular networks, and may also 
communicate over a data network. The voice and data networks are depicted in FIG. 8 by the 
communication tower 519. These voice and data networks may be separate communication 
networks using separate infrastructure, such as base stations, network controllers, etc., or they may 
be integrated into a single wireless network. References to the network 519 should therefore be 
interpreted as encompassing both a single voice and data network and separate networks. 

The communication subsystem 51 1 is used to communicate with the network 519. 
The DSP 520 is used to send and receive communication signals to and from the transmitter 514 
and receiver 512, and also exchange control information with the transmitter 514 and receiver 512. 
If the voice and data communications occur at a single frequency, or closely-spaced set of 
frequencies, then a single LO 513 maybe used in conjunction with the transmitter 514 and receiver 
512. Alternatively, if different frequencies are utilized for voice communications versus data 
communications or the mobile device 500 is enabled for communications on more than one network 
519, then a plurality of LOs 513 can be used to generate frequencies corresponding to those used in 
the network 519. Although two antennas 516, 518 are depicted in FIG. 8, the mobile device 500 
could be used with a single antenna structure. Information, which includes both voice and data 

- 10- 



information, is communicated to and from the communication module 51 1 via a link between the 
DSP 520 and the microprocessor 538. 

The detailed design of the communication subsystem 511, such as frequency band, 
component selection, power level, etc., is dependent upon the communication network 5 19 in which 
the mobile device 500 is intended to operate. For example, a mobile device 500 intended to operate 
in a North American market may include a conununication subsystem 511 designed to operate with 
the Mobitex or DataTAC mobile data communication networks and also designed to operate with 
any of a variety of voice communication networks, such as AMPS, TDMA, CDMA, PCS, etc., 
whereas a mobile device 500 intended for use in Europe may be configured to operate with the 
GPRS data communication network and the GSM voice communication network. Other types of 
data and voice networks, both separate and integrated, may also be utilized with the mobile device 
500. 

Communication network access requirements for the mobile device 500 also vary 
depending upon the type of network 519. For example, in the Mobitex and DataTAC data networks, 
mobile devices are registered on the network using a unique identification number associated with 
each device. In GPRS data networks, however, network access is associated with a subscriber or 
user of the mobile device 500. A GPRS device typically requires a subscriber identity module 
("SIM"), which is required in order to operate the mobile device 500 on a GPRS network. Local or 
non-network communication fiinctions (if any) may be operable, without the SIM, but the mobile 
device 500 is unable to carry out functions involving communications over the network 519, other 
than any legally required operations, such as '91 1' emergency calling. 

After any required network registration or activation procedures have been 
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completed, the mobile device 500 is able to send and receive communication signals, preferably 
including both voice and data signals, over the network 519. Signals received by the antenna 516 
from the communication network 519 are routed to the receiver 512, which provides for signal 
amplification, frequency down conversion, filtering, channel selection, etc., and analog to digital 
conversion. Analog to digital conversion of the received signal allows more complex communication 
functions, such as digital demodulation and decoding, to be performed using the DSP 520. In a 
similar manner, signals to be transmitted to the network 519 are processed, including modulation and 
encoding, for example, by the DSP 520 and are then provided to the transmitter 514 for digital to 
analog conversion, frequency up conversion, filtering, amplification and transmission to the 
communication network 519 via the antenna 518. Although a single transceiver 51 1 is shown for 
both voice and data communications, in altemative embodiments, the mobile device 500 may include 
multiple distinct transceivers, such as a first transceiver for transmitting and receiving voice signals, 
and a second transceiver for transmitting and receiving data signals, or a first transceiver configured 
to operate within a first frequency band, and a second transceiver configured to operate within a 
second frequency band. 

In addition to processing the communication signals, the DSP 520 also provides for 
receiver and transmitter control. For example, the gain levels applied to communication signals in 
the receiver 512 and transmitter 514 may be adaptively controlled through automatic gain control 
algorithms implemented in the DSP 520. Other transceiver control algorithms could also be 
implemented in the DSP 520 in order to provide more sophisticated control of the transceiver 511. 

The microprocessor 538 preferably manages and controls the overall operation of the 
mobile device 500. Many types of microprocessors or microcontrollers could be used here, or, 
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alternatively, a single DSP 520 could be used to carry out the functions of the microprocessor 538. 
Low-level communication functions, including at least data and voice communications, are 
performed through the DSP 520 in the transceiver 511. High-level communication applications, 
including the voice communication application 524A, and the data communication appUcation 524B 
are stored in the non-volatile memory 524 for execution by the microprocessor 538. For example, 
the voice communication module 524A provides a high-level user interface operable to transmit and 
receive voice calls between the mobile device 500 and a plurality of other voice devices via the 
network 519. Similarly, the data communication module 524B provides a high-level user interface 
operable for sending and receiving data, such as e-mail messages, files, organizer information, short 
text messages, etc., between the mobile device 500 and a plurality of other data devices via the 
network 519. 

The microprocessor 538 also interacts with other device subsystems, such as the 
display 522, the RAM 526, the auxihary I/O devices 528, the serial port 530, the keyboard 532, the 
speaker 534, the microphone 536, the short-range communications subsystem 540, and any other 
device subsystems generally designated as 542. For example, the modules 524A-N are executed by 
the microprocessor 538 and may provide a high-level interface between a user of the mobile device 
and the mobile device. This interface typically includes a graphical component provided through 
the display 522, and an input/output component provided through the auxiliary I/O devices 528, 
keyboard 532, speaker 534, or microphone 536. 

Some of the subsystems shown in FIG. 8 perform communication-related functions, 
whereas other subsystems may provide "resident" or on-device functions. Notably, some subsystems, 
such as keyboard 532 and display 522 may be used for both communication-related functions, such 
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as entering a text message for transmission over a data communication network, and device-resident 
functions such as a calculator or task list or other PDA type functions. 

Operating system software used by the microprocessor 538 is preferably stored in a 
persistent store such as the non-volatile memory 524. In addition to the operating system and 
communication modules 524A-N, the non-volatile memory 524 may include a file system for storing 
data. The non-volatile memory 524 also includes at least an authentication information store for 
storing authentication information. The operating system, specific device applications or modules, 
or parts thereof, are typically temporarily loaded into a volatile store, such as the RAM 526 for faster 
operation. Moreover, received communication signals may also be temporarily stored to RAM 526, 
before permanently writing them to a file system located in the non- volatile memory 524. The non- 
volatile memory 524 may be implemented, for example, with Flash memory, non-volatile RAM, or 
battery backed-up RAM. 

An exemplary appUcation module 524N that may be loaded onto the mobile device 
500 is a PEM application providing PDA functionality, such as calendar events, appointments, and 
task items. This module 524N may also interact with the voice communication module 524A for 
managing phone calls, voice mails, etc., and may also interact with the data communication module 
524B for managing e-mail communications and other data transmissions. Altematively, all of the 
functionality of the voice communication module 524 A and the data communication module 524B 
may be integrated into the PIM module. 

The non- volatile memory 524 preferably provides a file system to facilitate storage 
of PIM data items on the device. The PIM application preferably includes the ability to send and 
receive data items, either by itself, or in conjunction with the voice and data communication modules 
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524 A, 524B, via the wireless network 519. The PIM data items are preferably seamlessly integrated, 
synchronized and updated, via the wireless network 519, with a corresponding set of data items 
stored or associated with a host computer system, thereby creating a mirrored system for data items 
associated with a particular user. 

The mobile device 500 is manually synchronized with a host system by placing the 
mobile device 500 in an interface cradle, which couples the serial port 530 of the mobile device 500 
to a serial port of the host system. The serial port 530 may also be used to download other 
application modules 524N for installation on the mobile device 500. This wired download path may 
further be used to load encryption keys onto the mobile device 500 for use in secure 
communications, which is a more secure method than exchanging encryption information via the 
wireless network 519. 

Software application modules 524N may be loaded onto the mobile device 500 
through the network 519, through an auxiliary I/O subsystem 528, through the short-range 
communications subsystem 540, or through any other suitable subsystem 542, and installed by a user 
in the non-volatile memory 524 or RAM 526. Such flexibility in application installation increases 
the functionality of the mobile device 500 and may provide enhanced on-device functions, 
communication-related functions, or both. For example, secure communication applications may 
enable electronic commerce functions and other such financial transactions to be performed using 
the mobile device 500. Such software applications as a browser or a messaging application in the 
non-volatile memory 524 support remote access to a computer network using distributed 
authentication information and two-factor authentication at the computer network. The code 
generation software module or utility could be incorporated into, or at least accessible from, each 
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remote access software application to provide for the access code insertion or copy and paste features 
described above. 

When the mobile device 500 is operating in a data communication mode, a received 
signal, such as a text message or a web page download, is processed by the transceiver 5 1 1 and 
provided to the microprocessor 538, which preferably further processes the received signal for output 
to the display 522, or, alternatively, to an auxiliary I/O device 528. When data protection is enabled, 
received data may be encrypted as described above before being stored on the mobile device 500. 
A user of mobile device 500 may also compose data items, such as email messages, using the 
keyboard 532, which is preferably a complete alphanumeric keyboard laid out in the QWERTY style, 
although other styles of complete alphanumeric keyboards such as the known DVORAK style may 
also be used. User input to the mobile device 500 is further enhanced with the plurality of auxiliary 
I/O devices 528, which may include a thumbwheel input device, a touchpad, a variety of switches, 
a rocker input switch, etc. The composed data items input by the user are then transmitted over the 
communication network 519 via the transceiver 511, and may also be stored in encrypted form on 
the mobile device 500. 

When the mobile device 500 is operating in a voice communication mode, the overall 
operation of the mobile device 500 is substantially similar to the data mode, except that received 
signals are output to the speaker 534 and voice signals for transmission are generated by a 
microphone 536. Alternative voice or audio I/O devices, such as a voice message recording 
subsystem, may also be implemented on the mobile device 500. The display 522 may also be used 
to provide an indication of the identity of a calling party, the duration of a voice call, or other voice 
call related information. For example, the microprocessor 538, in conjunction with the voice 
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communication module 524A and the operating system software, may detect the caller identification 
information of an incoming voice call and display it on the display 522. 

A short-range communications subsystem 540 is also included in the mobile device 
500. For example, the subsystem 540 may include an infrared device and associated circuits and 
components, or a Bluetooth or 802.1 1 short-range wireless communication module to provide for 
communication with similarly-enabled systems and devices. Moreover, the device of FIG. 8 may 
include fewer, further, or different components than those shown in the drawing. 
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